
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/B3DED5C6BAC911EB8533B615C4F9AE02.roa
File: B3DED5C6BAC911EB8533B615C4F9AE02.roa (raw, json)
Hash identifier: +nAEEuzzAHJ64g2Y+I53w9dhyFuYT2+b3syIj71QLeM=
Subject key identifier: C0:F1:B7:D8:D6:93:02:38:68:A7:58:44:19:C9:5A:7B:10:17:98:EF
Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial: 0695
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/B3DED5C6BAC911EB8533B615C4F9AE02.roa
Signing time: Thu 07 May 2026 06:37:21 +0000
ROA not before: Thu 07 May 2026 06:37:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 131447
IP address blocks: 103.7.56.0/22 maxlen: 23
150.107.28.0/22 maxlen: 22
150.107.28.0/24 maxlen: 24
150.107.30.0/24 maxlen: 24
150.107.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Validity
Not Before: May 7 06:37:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fc3320-dc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:1c:64:55:33:c2:38:a3:38:a9:ee:c5:ee:
4c:99:34:b6:63:36:de:da:ac:9f:48:73:5e:ef:b9:
6c:1a:eb:bd:d5:2d:be:6d:63:db:3e:e5:bb:22:e3:
12:9b:d0:37:64:04:c8:88:c7:76:d8:e3:8f:a4:41:
5a:2b:c9:c9:ca:cb:f8:f2:4b:51:e4:d4:68:8a:7f:
31:97:c3:45:4c:a3:e1:7e:76:b6:4b:3a:16:d9:c7:
53:8b:8d:26:71:b8:60:0b:20:f1:a8:bb:e2:a1:07:
23:f6:d0:58:56:3d:3e:06:dc:d3:4b:bf:3b:29:62:
d7:2e:8a:3f:f7:f6:2c:f1:24:95:68:af:b7:db:2a:
c2:ae:10:4f:0d:60:da:1d:e4:89:50:47:94:6a:23:
82:99:2c:8d:51:0b:4e:0b:03:8b:72:da:2e:b3:01:
31:4c:e2:b1:a4:59:4d:dc:18:c1:e1:6f:b5:8d:94:
7b:12:a4:a1:56:ad:32:7e:3b:94:fe:ee:d0:e9:06:
ed:e3:40:f3:32:3c:3d:ce:cc:54:3c:7d:59:27:06:
cd:62:7b:ec:e0:f7:f1:33:07:4e:e3:7c:9b:85:37:
8b:e2:6a:89:18:22:d7:61:af:b0:50:37:66:97:61:
ae:89:db:d1:03:1a:97:e1:1e:a2:c5:57:9d:7b:d4:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:B7:D8:D6:93:02:38:68:A7:58:44:19:C9:5A:7B:10:17:98:EF
X509v3 Authority Key Identifier:
keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/B3DED5C6BAC911EB8533B615C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.56.0/22
150.107.28.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ea:db:9b:0f:71:86:14:b4:71:bc:b0:e4:c8:fd:77:be:19:
0f:23:23:df:6a:1b:77:25:6d:22:4b:f5:51:fd:da:6b:4a:b3:
3d:3b:a2:74:ee:d3:4e:0c:fc:be:ca:36:70:0c:21:28:8a:ac:
24:f7:79:c3:8f:bd:14:8f:fd:6a:1a:42:bb:24:10:66:23:ae:
e5:66:4d:aa:74:f8:a4:a4:54:0b:85:9e:7a:44:cd:2e:9a:ab:
b3:c8:eb:ad:e2:d5:ba:b6:da:fb:d4:a5:cc:76:3a:7a:2d:b8:
a4:1c:c5:9d:01:75:96:2b:86:4f:af:0b:13:18:9d:24:37:08:
f5:28:97:98:a5:4b:4a:11:23:f1:4c:de:4b:bc:cb:6a:78:6f:
76:9b:66:c8:62:ba:67:4e:80:46:20:50:d9:b7:c4:ea:9a:7a:
f9:66:4b:a8:ef:8a:77:f2:54:9c:26:72:d3:42:27:ce:54:57:
e0:f4:ac:95:1d:55:b7:58:f9:28:12:ec:07:ff:62:cf:4d:3c:
cd:e4:e3:54:84:d9:0c:35:1a:78:41:af:e3:77:31:30:34:42:
fe:44:81:2b:04:c8:d9:9a:78:8a:1d:3b:9d:47:f6:55:7c:c1:
8e:81:c5:3b:55:a8:dd:26:37:18:0e:b1:a5:28:6c:d4:8f:88:
39:45:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:47 2026 by rpki-client